Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.cer
File:                     A2971BA6355B7BAE100D15C6C26222FA28140A78.cer (raw, json)
Hash identifier:          Wwr7lr08fHi1MoSF6W1Iz/KuJbPr67rBOAcyNE88cAA=
Subject key identifier:   A2:97:1B:A6:35:5B:7B:AE:10:0D:15:C6:C2:62:22:FA:28:14:0A:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B12DCAD951859BF9C91F8912DFDCF7CCA509309
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Mar 2022 07:30:01 +0000
Certificate not after:    Wed 08 Mar 2023 07:35:01 +0000
Subordinate resources:    AS: 264188
                          IP: 138.97.144.0/22
                          IP: 2804:23dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:12:dc:ad:95:18:59:bf:9c:91:f8:91:2d:fd:cf:7c:ca:50:93:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 07:30:01 2022 GMT
            Not After : Mar  8 07:35:01 2023 GMT
        Subject: CN=A2971BA6355B7BAE100D15C6C26222FA28140A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:12:2c:2c:28:31:a9:c9:d1:29:8e:26:1c:
                    7b:ca:70:77:70:24:e3:01:6e:07:0f:0b:2f:e7:d6:
                    63:03:7d:da:a6:93:4f:8e:c1:50:b8:9b:b2:df:86:
                    f8:04:57:a0:e2:c3:1a:a6:ed:15:91:59:94:55:bf:
                    b4:79:2a:1a:a3:1d:6a:3c:8b:9e:ba:10:5c:81:15:
                    e2:75:8b:5b:c7:1f:79:d8:f3:10:26:09:d6:05:0f:
                    71:7a:44:7a:fa:46:c9:81:c6:7a:aa:ee:a6:76:ef:
                    2e:0e:4c:52:39:2c:33:7a:30:f1:de:98:9e:f5:21:
                    12:40:43:d1:28:0a:18:e7:61:d7:e5:98:22:6d:8f:
                    f2:34:19:24:38:79:52:bc:26:d0:02:cf:1b:89:7b:
                    6c:68:21:0d:51:cb:80:cb:6e:12:8a:7a:b6:61:bb:
                    83:45:95:d4:5f:d9:be:10:09:35:a1:85:36:d2:a1:
                    d3:38:4c:e8:cf:00:db:11:bc:63:cc:74:72:94:dc:
                    69:b2:ed:60:63:d0:a0:49:14:50:d4:53:24:a0:4b:
                    c6:e3:ea:43:74:9b:cb:f0:7f:c2:5d:47:e9:13:27:
                    d6:92:c2:9b:fb:54:bb:98:9a:b6:25:13:81:fd:49:
                    a7:0b:58:71:bb:2a:41:7d:4c:01:0c:99:4e:f5:05:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:97:1B:A6:35:5B:7B:AE:10:0D:15:C6:C2:62:22:FA:28:14:0A:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.144.0/22
                IPv6:
                  2804:23dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264188

    Signature Algorithm: sha256WithRSAEncryption
         10:17:f7:10:6c:40:fa:42:25:41:24:55:82:b0:2d:db:aa:ed:
         81:af:5f:5c:72:7e:f3:dc:af:70:a4:6a:4c:e6:11:17:e7:20:
         3d:ef:49:db:fb:52:14:a2:b6:6f:5f:3c:05:54:2c:e1:7a:8f:
         9e:fa:b5:b2:f5:a1:7e:2d:ba:9b:fa:78:6f:65:72:47:3b:7d:
         9a:d0:8f:cc:3a:ae:1f:94:2e:ee:9f:3a:db:26:9a:91:e7:7e:
         97:99:74:89:4c:87:8c:0b:58:7c:a0:e9:1c:0f:08:23:2e:7e:
         38:00:cb:9b:e0:fd:41:87:0d:3c:54:63:75:68:69:f4:12:51:
         da:9b:36:49:7a:44:ec:85:53:d5:e5:9c:59:b1:c0:7e:9d:c0:
         cb:ba:50:0d:13:20:e9:86:97:d4:42:48:ba:a1:52:a7:fc:16:
         b2:1d:fd:12:03:64:76:28:54:14:99:18:7a:2e:60:fd:88:b1:
         5a:65:e1:aa:b7:cd:f7:2e:18:39:54:69:63:28:ff:a0:2b:0a:
         ad:6c:7b:15:f6:31:ba:d8:32:6b:76:00:a3:d0:e8:9a:9b:dc:
         d4:23:8b:d9:ae:a3:cc:87:1f:2f:04:fe:44:83:d6:98:87:68:
         a1:2b:5f:b8:9f:a3:ed:54:7e:b8:6e:74:18:5c:b3:db:67:a9:
         5d:29:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org